Synology DiskStation Manager

productDE

cpe:/a:synology:diskstation_manager:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical6high5medium3low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3156US	high7.8OT critical	100.0% (100th)	KEV	no fix	2021-01-26	—
CVE-2020-25686US	low3.7OT elevated	5.47% (93rd)	Exploit	no fix	2021-01-20	—
CVE-2020-25687US	medium5.9	89.3% (100th)	—	no fix	2021-01-20	—
CVE-2020-25683US	medium5.9	88.8% (100th)	—	no fix	2021-01-20	—
CVE-2020-25681US	high8.1	84.1% (100th)	—	no fix	2021-01-20	—
CVE-2020-25682US	high8.1	75.1% (100th)	—	no fix	2021-01-20	—
CVE-2020-25684US	low3.7	4.16% (91st)	—	no fix	2021-01-20	—
CVE-2022-3592US	medium6.5	2.71% (86th)	—	no fix	2023-01-12	—
CVE-2020-25685US	low3.7	2.23% (83rd)	—	no fix	2021-01-20	—
CVE-2022-32746US	medium5.4	1.32% (71st)	—	no fix	2022-08-25	—
CVE-2022-32742US	medium4.3	1.31% (70th)	—	no fix	2022-08-25	—
CVE-2022-2031US	high8.8OT elevated	1.26% (70th)	—	no fix	2022-08-25	—
CVE-2022-32744US	high8.8	1.19% (68th)	—	no fix	2022-08-25	—
CVE-2022-32745US	high8.1	1.13% (66th)	—	no fix	2022-08-25	—

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow5 CVEs
CWE-290Authentication Bypass by Spoofing4 CVEs
CWE-358Improperly Implemented Security Check for Standard3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-193Off-by-one Error1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.